垃圾邮件被发布到网站
我认为这是机器人，或者类似的东西。 我们的网站上有论坛，每天都会有数千次尝试发布垃圾邮件。 这些实际上从未进入数据库，通常是通过抛出 ViewState 或 EventValidation 异常。 我不确定我是否应该真正担心。 我真的很想对这些机器人做点什么。 他们不仅浪费了我们的资源，而且试图筛选所有这些错误以找到真正的错误也有点烦人。 有什么建议么？
I assume it's bots, or something like them. We have forums on our website and daily we get 1000's of attempts to post spam. These never actually make it into the database, usually by throwing a ViewState or EventValidation exception. I'm not sure if I should even really be concerned. I'd really like to do something about these bots. Not only are they wasting our resources but it's more than a little annoying trying to sift through all these errors to find the real errors. Any suggestions?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
听起来这不是内容问题。 用户看不到垃圾邮件，因为绝大多数提交的内容都格式错误。 您有几个选择，具体取决于您对软件的控制：
除非这些提交对您网站的性能产生了可衡量的影响，否则我认为做更多的事情并没有多大用处。 添加验证码并不能阻止垃圾邮件的提交，而只能阻止垃圾邮件的成功提交（目前看来这不是问题）。 此时唯一值得您花时间的就是将不良提交分成单独的日志。
It sounds like this isn't a content problem. Users don't see the spam, because the vast majority of the submissions are somehow mis-formatted. You've got a couple of options, depending on the control you have over your software:
Unless these submissions are making a measurable impact on the performance of your site, I don't think there's going much use in doing a lot more than that. Adding CAPTCHAs wouldn't prevent spam from being submitted, just from being successfully submitted (which it doesn't sound like is a problem right now). The only thing that's worth your time at this point is breaking the bad submissions into a separate log.
我相信验证码就是为了解决这个问题而设计的。
I believe CAPCHA was designed to fix this problem.
最佳解决方案取决于论坛的受欢迎程度（用户数量）。
大多数论坛软件都有验证码和相关技术的插件。 这就是您想要的大型网站。 对于小型网站，您可以通过简单地在提交表单中添加一些随机问题（例如“您是人类吗？”）来作弊。 如果他们不在输入框中输入“是”，他们就不会通过您的（图灵？）测试。 大多数垃圾邮件发送者实际上并不访问您的网站，他们只是运行脚本来查找已知的论坛软件或明显的评论表单。
作为对您最后一条评论的回应，您无法阻止真正的人类向您的网站发送垃圾邮件（即使拒绝链接也是不够的）。 如果不关闭您的网站，您当然无法阻止任何人向您发送数据。 您应该简单地让版主删除通过您的验证码的任何垃圾邮件。
Best solution depends on the popularity (number of users) on your forum.
Most forum software have plug-ins for Captcha and related technologies. This is what you want for a large site. For a small site you can cheat by simply adding some random question to the submission form like "Are you human?" If they don't type "yes" in the input box they don't pass your (Turing?) test. Most spammers don't actually visit your site, they simply run scripts looking for known forum software or obvious comment forms.
In response to your last comment you can't stop an actual human spamming your site (even denying links is not enough). You certainly can't stop anyone sending you data without turning off your website. You should simply have moderators to remove any spam that gets through your captcha.
您可以查看网络服务器的日志文件，看看这些连接来自什么类型的“用户代理”。
IE/Firefox 等浏览器具有类似“Mozilla/4.0（兼容；MSIE 7.0；Windows NT 6.0）”的用户代理签名。
机器人可能会有（一些）特定的用户代理签名，您可以可以将它们添加到服务器配置文件中的黑名单中，以便您的服务器将忽略来自它们的请求。
另外，您应该花一点时间阅读
http://www.kloth.net/internet/bottrap .php
You could look at your webserver's log files and see what type of 'User Agent' those connections are coming from.
Browsers such as IE/Firefox have a User Agent signature of something along the lines of 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)'
The bots will likely have a (few) specific User Agent signature(s), you could add these to a black list in your server's configuration files so that your server will just ignore requests from them.
Also you should take a minute to read through
http://www.kloth.net/internet/bottrap.php